#1128347 ITP: trufflehog -- Find, verify, and analyze leaked credentials

Package:
wnpp
Source:
wnpp
Submitter:
Mikhail Potemkin
Date:
2026-08-09 20:03:02 UTC
Severity:
normal
Tags:
#1128347#5
Date:
2026-02-18 15:50:50 UTC
From:
To:
* Package name    : trufflehog
  Version         : 3.60.4-1
  Upstream Author : Truffle Security
* URL             : https://github.com/trufflesecurity/trufflehog
* License         : GNU Affero General Public License v3.0
  Programming Lang: Go
  Description     : Find, verify, and analyze leaked credentials

 What is TruffleHog 🐽
 .
 TruffleHog is the most powerful secrets **Discovery, Classification,
 Validation,** and **Analysis** tool. In this context, secret refers to a
 credential a machine uses to authenticate itself to another machine.
 This includes API keys, database passwords, private encryption keys, and
 more.
 .
 Discovery 🔍
 .
 TruffleHog can look for secrets in many places including Git, chats,
 wikis, logs, API testing platforms, object stores, filesystems and more.
 .
 Classification 📁
 .
 TruffleHog classifies over 800 secret types, mapping them back to the
 specific identity they belong to. Is it an AWS secret? Stripe secret?
 Cloudflare secret? Postgres password? SSL Private key? Sometimes it's
 hard to tell looking at it, so TruffleHog classifies everything it
 finds.
 .
 Validation ✅
 .
 For every secret TruffleHog can classify, it can also log in to confirm
 if that secret is live or not. This step is critical to know if there’s
 an active present danger or not.
 .
 Analysis 🔬
 .
 For the 20 some of the most commonly leaked out credential types,
 instead of sending one request to check if the secret can log in,
 TruffleHog can send many requests to learn everything there is to know
 about the secret. Who created it? What resources can it access? What
 permissions does it have on those resources?

#1128347#12
Date:
2026-03-15 14:03:47 UTC
From:
To:
Hi,

A repository has been created at
https://salsa.debian.org/go-team/packages/trufflehog and you are the
owner (https://salsa.debian.org/go-team/packages/trufflehog/-/project_members?search=Un1x0n)
so you can proceed and do whatever you wish.

Do you have a list of dependencies that need to be packaged together with this?

#1128347#17
Date:
2026-03-15 14:40:15 UTC
From:
To:
Yes, there are build dependencies. Should I send a list here?

вс, 15 мар. 2026 г., 17:05 Otto Kekäläinen <otto@debian.org>:

#1128347#28
Date:
2026-04-28 15:24:59 UTC
From:
To:
Those marked in green are those accepted into Debian unstable. Those
marked in yellow require further work to build Trufflehog.
Packages marked in white are those I need to build (if I don't use the
debian/vendor directory).

вт, 28 апр. 2026 г. в 18:01, Otto Kekäläinen <otto@debian.org>:

#1128347#31
Date:
2026-05-10 14:45:39 UTC
From:
To:
Hello,

Bug #1128347 in trufflehog reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/trufflehog/-/commit/bee13451ff0f766479d309ce730e60c8845597e5

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1128347

#1128347#36
Date:
2026-05-24 10:56:04 UTC
From:
To:
Hello,

Bug #1128347 in trufflehog reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/trufflehog/-/commit/4860ca03af7d6eaa5b8ac88753564a4d1f61e780

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1128347

#1128347#39
Date:
2026-06-01 16:55:10 UTC
From:
To:
Hello,

Bug #1128347 in trufflehog reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/trufflehog/-/commit/47bc1fc14f34fc61b6edbc90fff69911d6d0df32

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1128347

#1128347#42
Date:
2026-06-01 20:13:29 UTC
From:
To:
Hello,

Bug #1128347 in trufflehog reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/trufflehog/-/commit/f543144912a529a20c4ffc2d4985aabaa8c0a0a3

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1128347

#1128347#45
Date:
2026-08-09 08:42:00 UTC
From:
To:
Hello,

Bug #1128347 in trufflehog reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/trufflehog/-/commit/ede1ffb4520cbf191764255e181db98d380b83aa

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1128347

#1128347#48
Date:
2026-08-09 20:01:20 UTC
From:
To:
Hello,

Bug #1128347 in trufflehog reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/trufflehog/-/commit/ede1ffb4520cbf191764255e181db98d380b83aa

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1128347